This posting is here to collect cyber security news in November 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
This posting is here to collect cyber security news in November 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
222 Comments
Tomi Engdahl says:
CVSS 10.0 LXD MicroCloud Vulnerability Allows Trusted Client Impersonation
https://the420.in/lxd-microcloud-trusted-client-impersonation-flaw/
A maximum-severity vulnerability in Canonical’s LXD and MicroCloud platforms could allow attackers to impersonate trusted clients without possessing their private keys, potentially giving them access to clusters, virtual machines and, in some cases, root-level control of host systems.
Tomi Engdahl says:
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
https://thehackernews.com/2026/11/government-linux-servers-targeted-with.html?m=1
Tomi Engdahl says:
https://kyberturvallisuuskeskus.fi/fi/arvioinnit-ja-hyvaksynnat/traficomin-arviointi-ja-hyvaksyntapalvelut-ncsa/liikenne-ja-viestintavirasto-traficomin-ncsa-toiminnon-hyvaksymat-salausratkaisut
Tomi Engdahl says:
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
https://thehackernews.com/2026/11/attackers-exploit-critical-siemens.html?m=1
Tomi Engdahl says:
Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
https://thehackernews.com/2026/11/red-hat-patches-98-rated-linux-tcp-rce.html?m=1
Tomi Engdahl says:
https://www.vice.com/en/article/false-positives-from-ai-detection-tools-threaten-the-indie-musicians-theyre-supposed-to-protect/
Tomi Engdahl says:
Cyberattacks caused fridges and freezers to malfunction across European supermarkets and North Korea rejected allegations it was behind the crypto heist that stole $6.3 billion from Binance. Here’s this week’s top stories from the world of technology https://reut.rs/48xvzd8
Tomi Engdahl says:
Kyberturvallisuuskeskus muistuttaa, että OT- ja IOT-laitteiden tietoturvaongelmat voivat muuttua fyysisiksi ongelmiksi.
https://www.talouselama.fi/uutiset/a/603ec703-079e-438c-a0ab-f343618e5f80?utm_term=Autofeed&utm_medium=Social&utm_source=Facebook#Echobox=1793775419
Tomi Engdahl says:
https://www.facebook.com/share/p/1EoMfMkyCV/
OpenSSH rushed out version 10.6p2 to fix a critical auth bypass flaw. The bug hits Linux systems using the musl C library with PAM disabled, such as Alpine Linux. Systems on glibc or PAM are not affected.
The bug is almost funny: on Alpine Linux, typing 257 to 1024 characters of anything into the password prompt gives you root.
OpenSSH’s Damien Miller urged admins to disable password logins or SSH immediately. He added that long embargoes now mostly help attackers because AI agents rediscover these bugs within hours. Miller noted the root cause sits outside OpenSSH.
–
I hope people with internet facing SSH has learning to disable password auth by now. It was never a good idea – Have a passphrase on your cert instead.
Reminds me of the times where any internet facing mySQL server could be accessed simply by retrying with a bad password 256 times.
Tomi Engdahl says:
https://www.facebook.com/share/v/1MKzfTYXTz/
Hackers who cranked up fridge temperatures in dozens of stores across at least eight European nations likely exploited a simple weakness: default passwords on open systems that were easy to guess, a cyber security expert explains
VIDEO
https://www.facebook.com/share/v/19sRUPQCVP/
Tomi Engdahl says:
https://www.facebook.com/share/p/19zPBjX7ZH/
Industrial refrigeration and cold-chain monitoring systems protect food, medicine, and other temperature-sensitive products, making them attractive targets for malicious cyber actors.
The FBI is seeing these systems targeted across critical infrastructure sectors globally, putting inventory and equipment at risk. Together with partners at CISA, HHS, USDA, and the Department of Transportation, we have issued a fact sheet with clear, practical steps that network defenders can take to reduce their risk and protect operations.
We urge every organization that relies on these systems to review our guidance, implement the recommended mitigations, and report any suspicious activity to the #FBI.
https://www.ic3.gov/CSA/2026/261105.pdf
Tomi Engdahl says:
FBI, CISA warn of cyberattacks targeting refrigeration systems
https://www.bleepingcomputer.com/news/security/fbi-cisa-warn-of-cyberattacks-targeting-refrigeration-systems/?fbclid=IwdGRjcAVamBtleHRuA2FlbQIxMQBwZG9mBXNydGMGYXBwX2lkDDM1MDY4NTUzMTcyOAABH7stDEgczhanaq-P6jv5f-S6_9jjqTP3W1thQoRdy_h7xjrwX8PtV60JdG9M_aem_86r9w83eVh_u4pXwKarR0g
The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilage, equipment damage, and fire hazards.
The warning was issued jointly with the U.S. Departments of Health and Human Services (HHS), Agriculture (USDA), and Transportation (DOT), urging critical infrastructure operators to secure vulnerable refrigeration controllers used in healthcare, food production, chemical facilities, and transportation.
“Every organization that depends on refrigeration and monitoring systems should assume it could be a target,” said Chris Butera, CISA’s Acting Executive Assistant Director for Cybersecurity.
Tomi Engdahl says:
https://etn.fi/index.php/13-news/19492-liian-pitkae-salasana-avaa-linux-palvelimen-hyoekkaeaejaelle
Tomi Engdahl says:
Moottoripyörien on pian täytettävä uudet kyberturvallisuusvaatimukset, jotta ne voidaan hyväksyä liikenteeseen. YK:n R155-säännön vaatimukset tulevat voimaan uusille kaksipyöräisten ajoneuvotyypeille joulukuussa 2027 ja kaikille uusille rekisteröitäville ajoneuvoille kesäkuussa 2029.
https://etn.fi/index.php/13-news/19483-moottoripyoerien-kyberturvasta-tulee-pakollista
Tomi Engdahl says:
https://www.uusiteknologia.fi/2026/11/05/kaupan-pakastimien-takana-heikot-iot-nettisuojaukset/
Tomi Engdahl says:
Analyysi: Pommiuhkaus voi lamauttaa lentoliikenteen ilman yhtäkään räjähdettä
Syyllisiä ei vielä tiedetä, mutta Euroopan maat ovat syyttäneet Venäjää hybridioperaatioista jo aikaisemmin, Eurooppa-kirjeenvaihtaja Anna Karismo kirjoittaa.
https://yle.fi/a/74-20255523
Tomi Engdahl says:
Tyrnävän palossa tuhoutui jopa viidennes Suomen siemenperunoista, ministeriökin kokoontui
Pohjoispohjalainen pottupitäjä on merkittävää High grade -siemenperunan aluetta, joita on Euroopassa vain muutama
https://yle.fi/a/74-20255468
Tomi Engdahl says:
Vulnerabilities
OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass
On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters.
https://www.securityweek.com/openssh-rushes-patches-for-sshole-authentication-bypass/
OpenSSH has rolled out emergency patches for a high-severity authentication bypass that allows attackers to log in using very long passwords.
Dubbed SSHole and tracked as CVE-2026-123158 (CVSS score of 8.1), the security defect affects the OpenSSH server (sshd) on Linux distributions that use the musl libc implementation with the Pluggable Authentication Module (PAM) disabled.
A “misinterpretation of whether a string is intended to be a password hash” allows attackers to access certain accounts using any password that has between 257 and 1,024 characters.
Some accounts, such as root, should never accept a password, but in Linux distributions such as Alpine, OpenWrt, Buildroot, Yocto, and others, they do, Wakefield security researcher Özgün Kültekin says.
According to OpenSSH developer Damien Miller, the flaw is not in sshd itself, but can be exploited via sshd. Fixes were included in OpenSSH 10.6p2.
“We are making this release as fast as possible (we learned of the problem yesterday) because we have recently observed multiple cases of rapid bug rediscovery by AI agents, sometimes within hours, and so now consider long embargo periods to be a dangerous practice that primarily benefits attackers,” Miller said.
SSH vulnerability
OpenSSH has rolled out emergency patches for a high-severity authentication bypass that allows attackers to log in using very long passwords.
Dubbed SSHole and tracked as CVE-2026-123158 (CVSS score of 8.1), the security defect affects the OpenSSH server (sshd) on Linux distributions that use the musl libc implementation with the Pluggable Authentication Module (PAM) disabled.
A “misinterpretation of whether a string is intended to be a password hash” allows attackers to access certain accounts using any password that has between 257 and 1,024 characters.
Some accounts, such as root, should never accept a password, but in Linux distributions such as Alpine, OpenWrt, Buildroot, Yocto, and others, they do, Wakefield security researcher Özgün Kültekin says.
According to OpenSSH developer Damien Miller, the flaw is not in sshd itself, but can be exploited via sshd. Fixes were included in OpenSSH 10.6p2.
“We are making this release as fast as possible (we learned of the problem yesterday) because we have recently observed multiple cases of rapid bug rediscovery by AI agents, sometimes within hours, and so now consider long embargo periods to be a dangerous practice that primarily benefits attackers,” Miller said.
Advertisement. Scroll to continue reading.
Who approved that agent? – See it all with Axonius
On Thursday, Alpine Linux urged users to immediately apply the OpenSSH patches and restart sshd to replace the running daemon, or disable password logins and restart sshd.
“The attacker needs the name of an account whose password field is * (an account with no password set, which is normal for key-only accounts), and needs the machine to have at least one other account with a $5$ or $6$ password hash,” Alpine Linux warns.
Since version 3.16, Alpine Linux uses “*” to secure the root account, and $5$ or $6$ in password hashes show whether the SHA-256 or SHA-512 crypt was used.
“An attacker who can reach your SSH port can log in without knowing any password. It takes one connection, works every time, and needs no retries,” Alpine Linux notes.
Affected Alpine Linux deployments run OpenSSH without PAM, have password authentication enabled, have an account with the password field “*” (such as root, a key-only user created with adduser without a password, the alpine user in the official tiny-cloud images, or a user coming from a directory service through musl-nscd), and have at least one local account with a $5$ or $6$ password hash.
“We haven’t seen any reports of exploitation yet, but the details are public, and the attack is simple, so I expect scanning to start within hours. Finding targets is very easy. Shodan lists around 22 million systems with SSH open on port 22, and the real number is higher because Shodan doesn’t see everything. Only some of those run Alpine, but each attempt is a single connection, so an attacker can afford to try all of them,” Detectify co-founder and principal security researcher Fredrik Almroth said.
“We’d be extremely surprised if we didn’t see SSH brute-forcers attempting this by the weekend. It’s virtually free to try and an easy win if it works. If your organization is affected, update to the latest version where possible, and disable password-based authentication as a temporary mitigation if you can’t,” WatchTowr head of threat intelligence Jake Knott said.
https://nvd.nist.gov/vuln/detail/cve-2026-123158
–
What this means for Yocto
Default Yocto builds use glibc (TCLIBC = “glibc”), so a normal Poky-based image is not affected.
You are exposed if your distro sets TCLIBC = “musl” and pam is not in DISTRO_FEATURES. The openssh recipe only builds with PAM when the distro feature is on, so in that case sshd is built without it.
cve-check / SBOM tools will still flag it on every build that has openssh older than 10.6p2, because they match the version (CPE openbsd:openssh) and ignore libc. On glibc or PAM builds you can mark it as not affected in CVE_STATUS, giving the reason.
Tomi Engdahl says:
Incident Response
Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack
The October incident will cut fourth-quarter sales by up to €250 million and has led Ahold Delhaize to lower its 2026 outlook.
https://www.securityweek.com/grocery-giant-ahold-delhaize-estimates-financial-toll-of-october-cyberattack/
Dutch-Belgian grocery giant Ahold Delhaize estimates that last month’s cyberattack, which disrupted operations in the US and the Benelux, will wipe €200 million to €250 million ($224 million to $280 million) off its fourth-quarter net sales.
The company, whose brands include Albert Heijn, Delhaize, Food Lion and Hannaford, published the estimate this week with its third-quarter results. The attack occurred after the quarter had closed.
The cybersecurity incident is also expected to cost Ahold Delhaize €75 million to €100 million ($84 million to $112 million) in fourth-quarter underlying and IFRS operating income. On top of that, the company faces incident response and remediation expenses, but believes these will have little effect on its IFRS operating income for 2026.
As a result, the retailer has revised its 2026 guidance downward. It now projects diluted underlying earnings per share, at constant exchange rates, to grow in the low single digits, rather than in the mid to high single digits it had previously forecast.
Tomi Engdahl says:
Government
US Agencies Urge Organizations to Harden Refrigeration Controllers
The recommendations come amid attacks targeting fridges and freezers in supermarkets and blood banks in Europe.
https://www.securityweek.com/us-agencies-urge-organizations-to-harden-refrigeration-controllers/
The US government is urging healthcare, chemical, food, and transportation organizations to harden their industrial refrigeration and cold chain monitoring systems.
Over the past weeks, threat actors have been hacking monitoring systems to tamper with fridges and freezers in supermarkets and blood banks across Europe, causing millions in losses.
Hundreds of supermarkets were hit on October 11, when the attackers turned the temperatures in fridges to 50 degrees Celsius (122 degrees Fahrenheit) and set freezers to defrost, spoiling food and, in some cases, causing fires.
A second wave of attacks hit more than 100 supermarkets and a blood bank this week, but only supermarkets suffered losses. Quick action from staff prevented the compromise of blood products and samples, the French Blood Establishment (EFS) said.
Russian hacktivist groups such as Noname057(16) and Z-Pentest Alliance reportedly claimed hacking Danfoss, leading to speculation that they mounted the supermarket attacks. However, nothing has been confirmed, and Iranian hacktivists or state-sponsored hackers may also be responsible, BBC notes.
CISA, the FBI, HHS, USDA, and DoT say they “are aware of malicious cyber actors targeting electronic temperature controllers and commercial refrigeration controllers in retail grocery and cold storage facilities.”
“The actors may exploit vulnerabilities or weaknesses in unpatched or internet-accessible controllers to remotely alter settings and force units into continuous heating and defrost cycles, which can cause widespread inventory loss and equipment hazards,” the agencies note (PDF).
Hackers may exploit authentication bypasses, code injection, and weak configurations to access the management systems and tamper with refrigerator and cold storage systems’ temperature or cause denial-of-view conditions, the agencies say.
According to internet intelligence firm Censys, out of 6,695 internet-exposed refrigeration controllers identified on October 9, only 3,124 (or 47%) remain accessible from the web as of November 5.
The company’s analysis covers the widely used Copeland/Dixell XWEB and Danfoss StoreView controllers: XWEB exposure dropped 35% (3,708 to 2,420), while StoreView dropped 76% (3,004 to 708).
Per the US government’s recommendations, taking the control systems off the internet is the best action organizations can take to prevent attacks. If web access is necessary, these systems should be protected by a firewall or edge device.
https://www.ic3.gov/CSA/2026/261105.pdf
Tomi Engdahl says:
ICS/OT
Critical Node-RED Flaw Exploited in Attacks
Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells.
https://www.securityweek.com/critical-node-red-flaw-exploited-in-attacks/
Hackers have started exploiting a critical-severity vulnerability in Node-RED to deploy various payloads, vulnerability intelligence company VulnCheck reports.
Node-RED is a low-code, flow-based programming tool that supports the creation of event-driven applications through a browser-based editor. It is used in products across various sectors, including commercial ICS/OT devices.
Tracked as CVE-2026-58115 (CVSS score of 10/10), the bug is described as a missing authentication issue on the Node-RED HTTP interface that could enable attackers to access programming nodes that can execute system commands.
Siemens disclosed it on August 11, after finding it in its SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED installed. SIMATIC IoT2050 Advanced version 4.3.4.1 and later contain patches for the security hole.
According to Siemens, CVE-2026-58115 “could allow an unauthenticated remote attacker to create malicious flows and execute arbitrary code on the underlying server with maximum privileges.”
On Sunday, VulnCheck warned that it had observed successful in-the-wild exploitation of the vulnerability on October 30. The attack came from an IP in AS8075, Microsoft’s network, and delivered a complete exploit.
Tomi Engdahl says:
Artificial Intelligence
OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line
Rated Critical for cybersecurity, OpenAI’s new model beats GPT-5.6 Cyber at exploitation while staying in scope more reliably.
https://www.securityweek.com/openai-says-new-gpt-6-cyber-model-hunts-flaws-without-crossing-the-line/
OpenAI on Thursday unveiled GPT-6 Cyber, a security model the company says is far more capable than its predecessor and more disciplined about respecting the limits researchers set for it.
On ExploitGym, which checks whether an AI can exploit a given flaw in a remote target, the new model achieved 48.5%, up from 32.1% for GPT-5.6 Cyber.
OpenAI rated GPT-6 Cyber as Critical for cybersecurity under its Preparedness Framework, above the High designation given to GPT-5.6 Cyber.
In one alignment test, the model received an exploitation task alongside supporting services that were intentionally easy to hack but off-limits. Without deployment safety prompts, it refrained from exploiting them in 99.93% of cases, compared to 94.49% for GPT-5.6 Cyber. With the safety prompts, it never targeted the decoy services.
“This improvement in alignment reflects dedicated training to stay within authorized scope, respect restrictions, and report results accurately,” OpenAI said.
Tomi Engdahl says:
https://www.facebook.com/share/p/1NT4ruBRGW/
America Investigating Supermarket Refrigeration Cyberattacks as Threat Spreads Beyond Europe
The Pentagon is investigating suspected cyberattacks on refrigeration systems at six US military supermarkets, where freezers reportedly switched into defrost mode, destroying food supplies.
The FBI and CISA have now issued a warning about attacks targeting refrigeration systems worldwide.
With supermarkets across Europe and blood storage facilities in France also targeted, fears are growing over a wider campaign against critical infrastructure.
More details in our updated article. Link in the comments.
#CyberAttack #USA #Europe #FoodSecurity #CyberSecurity
Updated Article: https://www.abovethenormnews.com/2026/11/03/europe-emergency-preparedness-2026/
Europe’s 72-Hour Emergency Preparations Intensify as EU Warns of Growing Crisis Risks (Update: 5 November 2026)
The wave of cyberattacks targeting supermarket refrigeration systems across Europe has taken a serious international turn, with the Pentagon now investigating suspected attacks on military supermarket facilities across the United States.
Refrigeration systems at approximately six US military commissaries suffered unexplained failures during August, destroying food supplies. At Fort Huachuca in Arizona, freezers reportedly switched into defrost mode overnight, heating their contents instead of keeping them frozen.
The Pentagon’s criminal investigators are examining whether hackers deliberately interfered with these systems. American investigators are also working with French authorities following the similar attacks that have struck hundreds of European supermarkets.
On Thursday, 5 November, the FBI, the Cybersecurity and Infrastructure Security Agency (CISA), and several other US federal departments issued a joint warning about an ongoing global cyber threat targeting refrigeration infrastructure.
Officials warned that attackers can remotely manipulate temperature controls, activate continuous heating and defrost cycles, destroy food supplies and potentially create fire hazards.
The threat has now extended beyond supermarkets. In France, refrigeration systems associated with three blood storage facilities were targeted, although monitoring systems reportedly prevented damage to blood supplies.
US investigators are examining possible Iranian involvement in the military base incidents, although no responsibility has been established. There is currently no confirmation that the American failures and European attacks were coordinated.
The implications extend well beyond individual supermarket chains. The same refrigeration technology is used to preserve medicines, blood supplies, agricultural products and temperature-sensitive goods throughout international supply networks.
With American military facilities under investigation, European retailers reporting further attacks and federal agencies issuing urgent warnings, investigators face a growing question: Are these opportunistic attacks against vulnerable equipment, or is someone systematically testing how easily essential food and medical supply infrastructure can be disrupted across multiple countries?
Europe’s emergency preparations have intensified again, with the European Commission issuing new guidelines on how entire populations should prepare for a major crisis that could leave millions without electricity, communications, water or immediate access to emergency assistance. The latest announcement, made on 3 November 2026, goes far beyond encouraging people to keep emergency supplies at home. European authorities are being urged to prepare children for disasters, test the systems responsible for coordinating emergency responses and ensure households can survive independently for at least 72 hours.
A prolonged electricity blackout could quickly trigger further failures. Mobile phone networks depend on power, banking services rely on communications infrastructure, water systems require pumping equipment and shops increasingly depend on electronic payments. Heating systems could stop functioning, fuel supplies could become difficult to access and households might lose the ability to obtain reliable information. The Commission’s strategy specifically addresses the danger of interconnected systems failing during a crisis, when disruption to one essential service can create serious consequences elsewhere.
The growing concern surrounding Europe’s critical infrastructure was reinforced on Tuesday when Irish Taoiseach Micheál Martin warned about the threat posed by increasingly sophisticated cyberattacks against businesses and public utilities. His comments followed a suspected cyberattack that disrupted refrigeration systems at 13 SuperValu supermarkets in Ireland, with similar problems reported across several European countries. Although the incidents have not been confirmed as coordinated, the disruption demonstrates how vulnerable digitally connected equipment can be, particularly when essential food storage systems are affected.
European authorities are also being urged to examine whether their own emergency-response systems could withstand severe disruptions. A separate Commission recommendation calls for national civil protection contact points to establish operational continuity plans and conduct regular stress tests.
The timing coincides with a major European crisis-management exercise already under way. EU Integrated Resolve 2026 began on 19 October and is scheduled to continue until 20 November, testing how European institutions respond to a complex hybrid crisis involving threats both inside and outside the EU. Such crises can combine cyberattacks, security threats and disruption to critical infrastructure. The exercise involves European institutions preparing for circumstances in which several emergencies could unfold simultaneously, placing considerable pressure on government coordination and response capabilities.
On 30 October, the Commission established another body, the PreparEU Advisory Group, bringing together eleven senior crisis-management experts and six scientists and academics. Its responsibilities include examining threats to critical infrastructure, emergency communications, shelter arrangements, population movements and the capacity of European countries to respond to escalating disaster risks. The group is expected to present recommendations to Commission President Ursula von der Leyen and Commissioner Lahbib by spring 2027.
The Commission has also proposed an annual EU Preparedness Day, beginning on 23 October 2027, intended to encourage communities across Europe to practise emergency readiness. The new guidelines remain non-binding
Tomi Engdahl says:
Commission takes new steps to prepare Europeans for growing crisis risks
https://civil-protection-humanitarian-aid.ec.europa.eu/news-stories/news/commission-takes-new-steps-prepare-europeans-growing-crisis-risks-2026-11-03_en
Tomi Engdahl says:
https://www.facebook.com/share/p/1eMsMnMHjH/
Quick-thinking employees saved the blood supplies.
Three blood banks in France, Western Europe, were targeted in a cyberattack that attempted to drastically increase the temperatures of their refrigerated storage systems, potentially putting essential medical supplies at risk.
France’s Health Ministry confirmed the incidents on November 4, 2026, saying hackers had gained access to systems used to monitor and control cold storage facilities.
According to French weekly newspaper Le Canard Enchaîné, the attackers attempted to change temperature settings from -22°F (-30°C) to 230°F (110°C).
However, employees at the affected facilities responded quickly after receiving automated alerts.
Charley Dubois, spokesperson for the French Blood Establishment (EFS), explained that the organization maintains staff around the clock because blood products may be needed at any time.
Once the warnings appeared, employees transferred the blood supplies into refrigerators that were not connected to the compromised systems.
Their quick response prevented the supplies from being lost.
By Wednesday, authorities confirmed that the affected refrigeration equipment was back under control. Remote access to the systems had also been disabled as a precaution.
The incident follows a series of similar cyberattacks involving refrigerated storage equipment across Europe.
Supermarkets in eight European countries, including Sweden, Belgium, Luxembourg and Estonia, were recently affected by attacks that reportedly pushed freezer temperatures to 122°F (50°C), resulting in spoiled food and financial losses.
France also experienced similar incidents in October involving hundreds of supermarket refrigerators.
Meanwhile, the US Pentagon said it was investigating whether an August refrigeration malfunction affecting six military bases might have been connected to a cyberattack.
Authorities are continuing to investigate how the attackers accessed the systems and whether the affected equipment can safely resume normal operations.
The incidents have raised broader concerns about cybersecurity vulnerabilities in internet-connected infrastructure, particularly equipment responsible for storing essential medical and food supplies.
The French blood bank incident shows how a cyberattack can threaten more than computers and data. It can also put critical real-world services at risk, making rapid human intervention and secure backup systems especially important.
Tomi Engdahl says:
Dmitri Peskovin mukaan Venäjän perusteettomasta syyttämisestä kaikesta mahdollisesta on tullut jokseenkin pysyvä trendi Euroopassa. https://www.is.fi/digitoday/tietoturva/art-2000012393147.html?utm_term=Autofeed&utm_medium=Toimitus&utm_campaign=is_echo&utm_source=Facebook#Echobox=1793957996
Tomi Engdahl says:
https://www.politico.eu/article/russia-denies-involvement-in-fridge-hacks-across-europe/
Tomi Engdahl says:
CHILLING THREAT Fears Russian hackers behind Europe-wide fridge cyber attack after supermarkets left default ‘12345’ passwords
https://www.thesun.co.uk/news/40914759/russian-hackers-launch-europe-fridge-cyber-attack/
HACKERS who took out fridges across Europe causing millions of pounds worth of damage appear to be acting from Russia, a top cyber security expert has said.
Officials are yet to confirm who is behind the hack which targeted networks which had not changed their passwords from ‘12345’.
It is understood that hackers were able to crank up the heat of the freezers after gaining access by using the username ‘Supervisor’ and the password ‘12345’.
The affected freezers are believed to have been stuck using the default factory setting.
The known flaw had been publicly documented and widely circulated.
Tech experts working in the water industry, and gas and electricity grids, are believed to be on high alert for any attempt to disable their key systems.
Tomi Engdahl says:
The FBI has issued an alert over ‘malicious actors’
https://www.newsweek.com/fbi-issues-warning-as-hackers-target-grocery-store-refrigerators-12675160?utm_medium=Social&utm_source=Facebook#Echobox=1793955446
The FBI has issued a warning over a growing wave of cyberattacks targeting industrial refrigeration systems, including those used by grocery stores and cold storage facilities.
In an alert issued on November 5, the FBI and other government agencies said malicious actors were exploiting vulnerabilities in internet-connected temperature controllers to manipulate refrigeration settings. This potentially can cause food spoilage, equipment damage and significant financial losses.
“Attackers are targeting electronic temperature and refrigeration controllers, particularly in grocery stores and cold storage facilities,” the FBI said. “In at least one recent incident, attackers targeted refrigeration components at three foreign blood service facilities.”
The warning comes amid a wider wave of cyberattacks affecting supermarket refrigeration systems across Europe. Retailers have reported disruption linked to hackers remotely altering freezer temperatures.
The advisory was posted jointly by the FBI, the Cybersecurity and Infrastructure Security Agency (CISA), the Department of Health and Human Services, the U.S. Department of Agriculture (USDA) and the Department of Transportation. It said security weaknesses in unpatched or internet-accessible controllers can allow attackers to exploit software vulnerabilities, and weak configurations. This enables hackers to gain remote access and alter system settings.
The agencies added that attacks could create fire hazards, disrupt temperature monitoring and indirectly endanger consumers if food is sold after being stored at unsafe temperatures.
Tomi Engdahl says:
Attackers may exploit the bug without user clicks, credentials, or authentication. More: https://cnews.link/microsoft-paint-cve-2026-83844-windows-vulnerability/
Tomi Engdahl says:
Chilling. https://trib.al/MCTUB5q
Out for Blood
Hackers Break Into Blood Plasma Cold Storage Units, Cranking Up Temperatures in Attempt to Destroy Lifesaving Medical Resources
Too close for comfort.
https://futurism.com/health-medicine/blood-bank-cold-storage-hack?fbclid=IwdGRjcAVbLoFjbGNrBVsucWV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfn9lWNSLiyLCSASDlBRUz57fhcBV9QUQuVFwrCoA-9AcJUj6rO-URLY6vCnw_aem_jNjN6_LQR6c13SAtb0MLww
Europe’s industrial scale fridges continue to be at the mercy of cybercriminals, who have claimed another victim in their chilling hacking spree.
The French Blood Establishment (EFS) confirmed that its cold storage units containing blood were compromised at three of its locations on Monday. The attack allowed the hackers to crank temperatures and defrost thresholds up to “excessively high levels,” it said in a statement translated from French by CNBC.
The attack targeted Coolword, the refrigeration system provider; the EFS blood bank just happened to be collateral damage, endangering a lifesaving medical cache.
“These cold storage units — located at EFS preparation and distribution sites — are used to store blood products prior to their delivery to healthcare facilities, as well as samples intended for EFS biobanks,” the EFS said.
The attack coincided with another attack on European supermarkets that same day, spoiling food as hackers set thermostats up to 122 degrees Fahrenheit.
No blood samples were lost, but it was a close call. The blood bank’s surveillance systems were activated immediately, allowing the compromised equipment to be either brought under control — or in some cases turned off — before the heat could damage the blood stores. The samples were then quickly transferred to other facilities, per CNBC.
The French health ministry said that the “situation is now under control and is being closely monitored,” per Reuters. “The safety of the blood supplies was preserved thanks to the facilities’ monitoring and alarm systems, as well as precautionary measures immediately implemented.”
The blood bank incident comes just two weeks after hackers hijacked the fridge and freezer systems of hundreds of supermarkets across France and parts of Europe. Several major food chains were affected, including Carrefour, which said that 80 of its locations were caught in the attack.
Tomi Engdahl says:
“We will have the cameras bagged or disabled within 72 hours of the certification of the vote.” https://trib.al/0KiQxRL
Popular Referendum
Flock Cameras Got Eviscerated by the Midterms
“We will have the cameras bagged or disabled within 72 hours of the certification of the vote.”
https://futurism.com/future-society/flock-alpr-surveillance-cameras-eviscerated-midterms?fbclid=IwdGRjcAVbMsxjbGNrBVsytWV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfL_64_Vnr3xN3Giu9BOwE4PtDCI7TZWLsDe8Qb8xbVES6HMf5VLqpT4algyM_aem_4InDdC9127Sk3Ey6oGd6FQ
Tomi Engdahl says:
While there’s no evidence linking AI to mass layoffs, the tech has already ‘changed worker psychology’
https://www.theguardian.com/technology/2026/nov/06/ai-disruption-job-quitting?CMP=fb_gu&utm_medium=Social_img&utm_source=Facebook&fbclid=IwdGRjcAVbMyFjbGNrBVszGmV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfrjI9NQbxLOYZmp8beVQvPwhJfL1MtQ1b_k6iAW7t6tW6VLZJf2dbq5aABxo_aem_d2xG5vAI9VNqEB2vg7mbfg#Echobox=1793985959
Fearing AI disruption, white-collar workers are quitting their jobs
While there’s no evidence linking AI to mass layoffs, the tech has already ‘changed worker psychology’
When artificial intelligence researcher Mrinank Sharma quit his job at Anthropic earlier this year, the news rippled across the internet. In his resignation letter, posted on X and viewed 15.3m times, Sharma warned of a world “in peril” from the technology he had helped build.
“It is clear to me the time has come to move on,” he wrote. His next move: a poetry degree.
In the months following Sharma’s resignation, AI industry defectors and workers outside of Silicon Valley alike have echoed his sentiments.
Bracing for disruption forecasted by the AI industry, white-collar professionals are voluntarily leaving established careers to pursue professions they feel are more secure or more aligned with their values. Workers across industries – from tech to public relations to consulting – say AI changed the substance and stability of their jobs overnight. They worry about AI jeopardizing their cognitive abilities, contributing to climate change, undermining value to customers and compromising security. Some, like Sharma, have left their fields entirely, shifting to vastly different careers.
So far, economic data shows that AI has not wreaked havoc on the workforce. It’s created about 1m US jobs, compared with 200,000 layoffs attributed to AI, according to the Economist. But as AI executives continue to warn of disruption, 71% of Americans believe the technology will lead to fewer jobs over the next 20 years, according to the Pew Research Center. As workers fear for the future, though, they’re making major decisions about the present.
Tomi Engdahl says:
Bomb threats warning ‘the clock is ticking’ disrupt TV channels across Europe
https://www.reuters.com/world/bomb-threats-warning-the-clock-is-ticking-disrupt-tv-channels-across-europe-2026-11-06/?link_source=ta_first_comment&taid=6aee46fa41c59c0001ea9628&utm_campaign=trueAnthem:+Trending+Content&utm_medium=trueAnthem&utm_source=facebook&fbclid=IwdGRjcAVbvy5jbGNrBVu_KmV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfOr1-URc5kh23llsgUBtoQP4WdMFeOQWpzo4w4BeQOS_DD4Ex77No1mUJZUs_aem_n1GWuO9cXiHsDHiT9pODHA
Summary
Follow flight hoaxes, cyberattacks on supermarkets
Purported author ‘Mikhail Andropov’ says worse to come
TV programming disrupted, no explosives found
Tomi Engdahl says:
https://sshhole.com/
Tomi Engdahl says:
White House urges developers to dump C and C++
https://www.infoworld.com/article/2336216/white-house-urges-developers-to-dump-c-and-c.html
Tomi Engdahl says:
Discord is ditching Electron and its new app uses less RAMDiscord is moving its apps fully over to the Rust programming language.
https://www.theverge.com/news/1027379/discord-ditching-electron-web-app
Tomi Engdahl says:
At least 20 commercial flights in Europe had to deal with bomb threats Thursday, with at least one being diverted to a military base in France. Authorities have reported that no explosives were discovered on any of the jets, and they all appeared to be hoaxes. Thursday’s incidents add to a fast-growing number of journeys hit by similar threats this week, which one expert said suggested a “very deliberate act.” https://cbsn.ws/4zwPoNK
Tomi Engdahl says:
Hacked blood banks, breached supermarket fridges and plane bomb hoaxes: What’s going on in Europe?
After a week in which several European sectors were thrown into disarray, how concerned should the continent be of hybrid warfare by hostile adversaries? Alex Croft reports
https://www.independent.co.uk/news/world/europe/uk-europe-cyber-attacks-b3079159.html?fbclid=IwdGRjcAVcQRpjbGNrBVxA_2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfWvJpbZdxIno9VxIf7EmmZ_NUchDX44wLC29h4hUIz3clbnCiI9bXIzG4eFI_aem_xpbFdwb0lV1nNwRwX-6Whg
Europe is on high alert after a fresh wave of cyber attacks, online hoaxes and bomb scares brought major disruption this week, causing tens of millions of euros in estimated losses.
Dozens of flights across Europe were paralysed by threats, forcing diversions and partial airport closures as explosives disposal teams and sniffer dogs searched each aircraft identified.
Freezers in parts of the UK and Europe were hit by a suspected hack that saw internal temperatures rise dramatically, spoiling huge amounts of food.
In France, blood banks were subjected to a cyber attack on Monday that damaged cold storage and control systems in multiple regions across France.
And British broadcaster Sky said it received a security threat on Friday, hours after Irish broadcaster RTE evacuated its building following a similar warning.
The disruptions come amid heightened anxiety over the threat of so-called ‘hybrid attacks’ by foreign actors – and experts tell The Independent that the events of the past week show all the hallmarks of sabotage by foreign adversaries.
“There’s no money in this, so the payoff is psychological and political,” says CEO of cybersecurity firm Heimdal, Jesper Frederiksen. “These attacks prove reach, test how fast governments respond, and wear down public confidence that the state can protect everyday life.”
Europe has long been sounding the alarm about a hybrid war – from Russia in particular, with EU commission president Ursula von der Leyen warning it is “not about traditional defence” and requires a “completely new mindset”.
Dray Agha, a senior manager at cybersecurity firm Huntress, said the disruption of food chains and medical services is a “proven tactic to generate public anxiety and undermine confidence in civil institutions”, which shows how “national resilience now relies entirely on the security of everyday commercial networks”.
Matt Lovell, CEO of CloudGuard, says the incidents “shouldn’t be read in isolation” and that all show a pattern of being “low-cost, highly visible, and disruptive to everyday life”.
Russian hacktivists have claimed responsibility for the supermarket attacks and newsroom bomb hoaxes – and experts make clear that this does not rule out nation-state involvement.
In fact, they say, it follows a trend of states allowing proxies to carry out the attacks while they retain a level of plausible deniability.
Supermarket fridge attacks
Hackers cranked up fridge temperatures at shops in European countries this week, forcing retailers to throw away large quantities of food in an attack that echoed a similar incident in France three weeks earlier. Russian hacktivists have claimed responsibility.
“Pro-Russian hacktivist groups have claimed the fridge attacks, and US prosecutors have linked them to a network funded by Russian military intelligence,” said Mr Fredriksen.
“That is the model to watch. The state doesn’t press the button itself. It lets aligned proxies do it and keeps deniability.”
Irregularities were reported at stores in Belgium, Luxembourg, Sweden, Germany, Greece, Ireland, Italy, Estonia, the Netherlands and Finland. Giants Carrefour and Ikea were among those affected.
In Britain, hackers tried to target small meat-processing firms but the impact was minimal.
But in Stockholm, the impact was clear. “Everything is destroyed,” says Engla Ingwall, sales manager at an ICA franchise store, adding that the attack occurred at 2am on Monday but was only noticed hours later.
“There has been a cyberattack and all our freezers reached 50 degrees (Celsius).”
The incidents have raised concerns in the European Union about vulnerabilities in connected infrastructure amid security tensions in the wake of Russia’s 2022 invasion of Ukraine.
The attacks on fridges open up the “very real possibility that nation-states are probing how to disrupt cooling systems that sustain military bases and critical response personnel”, says Sarah Cleveland, a senior director at cybersecurity firm ExtraHop.
He claims Russia has been making sustained attempts to penetrate UK military networks, while Iran is carrying out malicious cyber operations globally, including the UK.
Moscow, Beijing and Tehran have all repeatedly denied similar accusations of malevolent cyber actions in the past.
Tomi Engdahl says:
KILL SWITCH How crippling cyber attacks could turn deadly with even PACEMAKERS hit as vengeful Putin ramps up pressure on the West
https://www.thesun.co.uk/news/40897364/russia-hack-starve-europe-fridge-attack/?utm_medium=Social&utm_campaign=sunmainfacebook&utm_source=Facebook#Echobox=1794051208
HOSPITALS face being plunged into darkness if the West doesn’t fix outdated security systems after a daunting week of cyber attack chaos.
Vladimir Putin is ramping up his shadow warfare against Europe – as fears mount Moscow was behind a wave of chaos at supermarkets and on passenger flights this week.
On Monday, freezers across Europe, including the UK, were hit by cyber attacks – sending internal temperatures as high as 55C and spoiling millions of pounds worth of food.
The chaos led to every UK home being advised to stock up in case of a crippling attack – with Brits told to prepare for a potential terrifying 72 hours of darkness.
Across the week, a series of bomb threats also affected over 40 flights, sparking a spate of emergency landings and fighter jet escorts.
It has not been confirmed who was behind the schemes, but speculation is growing Moscow could be responsible.
Niklas Granholm, Deputy Director of Studies at FOI, the Swedish Defence Research Agency, told The Sun: “The overall picture points to an organised hybrid campaign – attacks on a broad spectrum of societal functions where the attacker is difficult or impossible to identify – by a state actor.”
This week’s widespread disruption has exposed the stark vulnerability of Europe’s critical infrastructure, experts say.
The National Cyber Security Centre confirmed on Tuesday Britain must prepare for hybrid warfare amid the sprawling fridge cyber attack that also hit UK meat suppliers.
Putin could now look to put his foot on Europe’s neck by increasing his attacks on critical internet-based systems – some of which experts warn are especially vulnerable.
The term refers to networks of physical everyday appliances that connect with other devices using the internet.
These include things like supermarket freezers, transport systems or even health care equipment.
Klaar told The Sun: “Lots of medical devices are connected to the internet. We don’t want to see people start dying in hospitals because of overheating or pacemakers going crazy – that’s definitely a threat.”
She added: “There are so many devices which are connected to the internet already with a very low level of security. Every national cyber agency should really urgently look into those.”
Our most crucial government systems are much more robust and some are kept off the internet entirely – but IoT devices are still important and must be updated, she added.
Jamie MacColl, a cyber security researcher at the Royal United Services Institute, highlighted energy systems as another vulnerability.
He told The Sun: “Electricity generation and distribution networks, things like solar inverters, aspects of kind of wind power generation.
“The nature of those systems means there’s huge amounts of internet connected sensors on them, which are remotely accessible.
“In theory, they possibly have been designed in a way that is not as secure as they could be.”
Klaar and MacColl said it was too early to point the finger at anyone for recent attacks.
But Putin has increased the scope of his shadow warfare in recent months – stirring unrest across a range of different critical infrastructure targets.
Increasingly brazen Russian aggression has escalated to bring energy grids, undersea communication cables, and airports into the crosshairs.
The EU is quietly bracing for a mass-casualty hybrid attack – frantically drawing up plans to respond to a large-scale assault, reports say.
Tomi Engdahl says:
At a recent summit on UK resilience, the conversation focused on the need for the UK to be able to withstand a Black Sky event for a minimum of 72 hours.
Read more about the plan for a ‘Black Sky’ event: https://bbc.in/4zalMVs
Tomi Engdahl says:
”Kuoleman tekstiviesti” voi katkaista jopa hätäpuhelun – Suomessa on poikkeuksellinen tilanne
”Kuoleman tekstiviesti” voi jumittaa puhelimen täysin. Voiko siltä suojautua?
”Kuoleman tekstiviesti” voi katkaista jopa hätäpuhelun – Suomessa on poikkeuksellinen tilanne
https://www.is.fi/digitoday/art-2000012390323.html
Lue tiivistelmä
Googlen Android-puhelimista löytyi haavoittuvuus, joka voi kaataa laitteen yhdellä tekstiviestillä.
Hyökkäys voi katkaista jopa hätäpuhelun eikä uhri näe viestiä. Korjaavaa päivitystä ei vielä ole.
Elisa ja Telia ovat estäneet uhan asiakkailtaan. DNA työstää korjausta.
Puhelimen päivitykset kannattaa pitää ajan tasalla.
Suomalaiskäyttäjillä on poikkeuksellinen suojaus Android-puhelimia uhkaavaan vakavaan tietoturva-aukkoon.
Android-käyttöjärjestelmästä löytyi ”kuoleman tekstiviestiksi” kutsuttu haavoittuvuus, jonka avulla puhelimen voi kaataa pelkällä tekstiviestillä. Tietty merkkijono katkaisee meneillään olevan puhelun, myös hätäpuhelun.
Elisa ja Telia ovat suojanneet asiakkaansa hyökkäykseltä. DNA työstää parhaillaan korjausta.
Elisan kyberturva- ja palvelunhallintakeskuksesta vastaava johtaja Karri Jäkkö kertoo, että haavoittuvuus mahdollistaa puhelimen mobiiliverkkoyhteydestä vastaavan prosessin kaatamisen.
– Tällöin mobiiliverkkoa käyttävät sovellukset, kuten tekstiviestit ja puhelut voivat lakata toimimasta. Toistuessaan hyökkäys tekee puhelimen käytöstä hankalaa, Elisan Jäkkö kertoo IS:lle.
– Tilannetta rajaa se, että sama toiminto on ongelmallinen vain joissakin puhelinmalleissa, ja ongelma koskee ainoastaan Android-laitteita, DNA:n petostentorjuntapäällikkö Ilkka Tuominen toteaa IS:lle.
Tällä hetkellä käyttäjä ei voi itse suojautua millään tavalla.
Hyökkäyksiä ei ole havaittu myöskään Elisan verkoissa. Tekotavan helppouden vuoksi on todennäköistä, että haavoittuvuutta yritetään käyttää yksittäisiin henkilöihin kohdistuvaan häirintään ja kiusaamiseen.
– Hyökkäys on tyypiltään palvelunestohyökkäys, eikä se siten vaaranna puhelimen käyttäjän tietoja tai tunnuksia. Vahingot rajoittuvat siis yhteyksien ja laitteen toimimattomuuteen, Jäkkö sanoo.
Jäkkö muistuttaa, että haavoittuvuuksia ja uusia hyväksikäyttökeinoja voi tulla lisää nopeastikin.
Telian Turunen pitää epätodennäköisenä ilmiön yleistymistä Suomessa, mutta kertoo operaattorin seuraavan tilanteen kehittymistä
Tomi Engdahl says:
London Bridge Tube station evacuated and closed over fire alert
Transport for London (TfL) announced the closure on social media on Saturday evening
https://www.independent.co.uk/news/uk/home-news/london-bridge-alert-fire-station-closed-b3081046.html?fbclid=IwdGRjcAVcbJpjbGNrBVxsamV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfk-W6uIZVOguFJBsiYabnyNcTLpFOiKrrDKdPgqvW9Ok1dR3HjcnVq5EncnU_aem_VXgqPW4idQwdsHO-HlnpXQ
Tomi Engdahl says:
Putin’s hybrid war could hit hospitals as cyber attacks turn deadly in the UK
A cyber security expert has warned UK hospitals could face power outages and medical devices including pacemakers could be targeted in cyber attacks linked to Vladimir Putin or other hostile states
https://www.dailystar.co.uk/news/latest-news/putins-hybrid-war-could-hit-37854224?utm_medium=Social&utm_source=Facebook&fbclid=IwdGRjcAVcundjbGNrBVy6U2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfX4C58eoqb3WvYVLEkpp_rhFl5F8GOaEGTXqHdukLSqNIDUtY_PiAOI19guY_aem_swdtGAX4-g9O7FWKNbswRw#google_vignette
Hospitals could be plunged into darkness if the West does not fix outdated security, an expert has warned. New fears have been sparked that a cyber attack launched by Vladimir Putin or other enemies of Britain could trigger chaos.
Tomi Engdahl says:
White House war advisor warns next 8 weeks ‘are most dangerous of our lives’
After Donald Trump faced a series of devastating defeats in the Midterms, a former White House advisor claimed the next eight weeks could be “the most dangerous of our lives”
https://www.themirror.com/news/us-news/white-house-war-advisor-warns-2098510?fbclid=IwdGRjcAVcutRjbGNrBVy6vmV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfFr64GBVigmaNw26zUFx3AAq4_BBcAPdcreKoQl_Ogxutjpg2aVtb3GTxmaM_aem_zvdyDyhopDXTDVkTFp8ZwQ
A former White House war advisor has said the next eight weeks could be “the most dangerous of our lives”. Robert Pape advised the Obama administration and is also a Professor of Political Science at the University of Chicago.
Tomi Engdahl says:
Kun liikenneonnettomuuden osapuoli poistuu paikalta, saattaa kyseessä olla rikos. Mutta mikä sorti robotin erheeseen? Lue lisää: https://www.mtvuutiset.fi/artikkeli/kuljetusrobotti-aiheutti-onnettomuuden-tallinnassa-haipyi-ennen-poliisin-tuloa/9417842 Kuva: AOP
Tomi Engdahl says:
British soldier ignored order to pull his SIM card, then got blackmailed
Soldier told repeatedly to lock down devices before deploying, got sextorted, court-martialed.
https://arstechnica.com/security/2026/11/british-soldier-ignored-order-to-pull-his-sim-card-then-got-blackmailed/
Tomi Engdahl says:
US believes Nvidia’s Huang had romantic relationship with alleged Chinese spy
American intelligence warned the tech boss was involved with executive recruited by China to gather information on US group
https://www.ft.com/content/a55a2a22-4479-4f93-a445-6147a5c6d790?syn-25a6b1a6=1
The US government believes Nvidia’s chief executive Jensen Huang had a romantic relationship with a Chinese woman who was recruited to spy for China’s main intelligence agency, according to people familiar with the matter.
Tomi Engdahl says:
https://www.dna.fi/yrityksille/blogi/-/blogs/kyberrosvoista-tuli-tekoalyn-myota-tehokkaampia-joona-hoikkala-puolustuksella-on-kaytossaan-samat-tyokalut?utm_source=facebook&utm_medium=paid&utm_content=TEK-artikkeli-kyberrosvoista-tuli-tekoalyn-myota-tehokkaampia-joona-hoikkala-puolustuksella-on-kaytossaan-samat-tyokalut&utm_campaign=P_TEK_26-45-49_artikkelikampanja&fbclid=IwdGRjcAVdWsRleHRuA2FlbQEwAHBkb2YFYWRpZAGrOcZKGSfsc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfLeoCV6iVwJouTiwWTl4Rh2qq-w4anenARPYxTF9uTOwc1VvjUebAgSbnQYw_aem_LPuMpub9IhtkCeYE_5pA_A&utm_id=120253338791980556&utm_term=120253338792030556
Tomi Engdahl says:
https://www.facebook.com/share/p/1Eeouopy45/
Households have been told to keep an FM wind-up radio in case of a power outage from the attack
What happens if a ‘Black Sky’ attack hits the UK?
https://metro.co.uk/2026/11/07/happens-a-black-sky-attack-hits-uk-29773583/?ito=facebook%7Csocial%7Cmetroukfacebook&ito=facebook%7Csocial%7Cmetroukfacebook&fbclid=IwdGRjcAVdXSZjbGNrBV1dGGV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEf17zKX4aOTq3V9ijjAsTGFlp4Yq7wF7VLEqhJOFfQbcWp8E9vMPXM0JXG3SQ_aem_WRyBL-oJWcmQ0ztC4TkUqQ
With a campaign underway to improve emergency planning, BBC executives are working to ensure the national broadcaster can stay on air even in the event of a large scale crisis.
A contingency radio studio, dubbed Black Sky, will be able to operate without internet in case of widespread outage.
The project is so secretive that only a small number of people know the exact details, although some 100 people would run the studio, which would be stocked with food and essential supplies needed to get through a crisis.